Re: SSL on tso

2017-04-05 Thread Tony Harminc
On 5 April 2017 at 05:14, saurabh khandelwal wrote: > Then I downloaded using ASCII and renamed with .Cert and tried putting it > to PCOmm database and getting below error. > > The validity period doesn't include today or does not fall within its > issuer's

Re: SSL on tso

2017-04-05 Thread saurabh khandelwal
Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of saurabh khandelwal > Sent: Tuesday, April 04, 2017 12:06 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: SSL on tso > > Hello group, > > Till now we completed below steps to enable sal for tso. > 1) open por

Re: SSL on tso

2017-04-04 Thread Cieri, Anthony
Subject: Re: SSL on tso Hello group, Till now we completed below steps to enable sal for tso. 1) open port 992 firewall 2) using gskkyman utility, created database and self signed certificate for the user under which tn3270 address space running. 3)made additional entry of SSL port 992 in tn3270

Re: SSL on tso

2017-04-03 Thread saurabh khandelwal
Hello group, Till now we completed below steps to enable sal for tso. 1) open port 992 firewall 2) using gskkyman utility, created database and self signed certificate for the user under which tn3270 address space running. 3)made additional entry of SSL port 992 in tn3270 profile with key

Re: SSL on tso

2017-03-30 Thread Andrew Rowley
On 31/03/2017 6:48 AM, Mark Pace wrote: Also note that one of the hard parts of SSL with PCOMM is self-signed certs. You need to send a copy of the public key to each user of PCOMM and import the certificate. If you're using a better TN3270 client, like Vista TN3270, you won't have this

Re: SSL on tso

2017-03-30 Thread Mark Pace
Also note that one of the hard parts of SSL with PCOMM is self-signed certs. You need to send a copy of the public key to each user of PCOMM and import the certificate. If you're using a better TN3270 client, like Vista TN3270, you won't have this problem. At least that what I remember when I

Re: SSL on tso

2017-03-21 Thread Tom Brennan
I created a couple of SSL setup examples (RACF and USS) that worked for me a few years back. With these instructions I was able to setup SSL encryption using self-signed certificates (i.e. no paid-for certificates that your site may require), but without any host or client authentication.

Re: SSL on tso

2017-03-21 Thread saurabh khandelwal
Yes, I m referring to IBM pcom . For secure two session we would like to use 992 port. I did google it for archived data but couldn't find steps to implement this new change in the system On 20-Mar-2017 3:17 PM, "Elardus Engelbrecht" < elardus.engelbre...@sita.co.za> wrote: saurabh khandelwal

Re: SSL on tso

2017-03-21 Thread Doron Geva
Enjoy the SSL On Tue, Mar 21, 2017 at 9:17 AM, Timothy Sipples wrote: > This presentation provides excellent advice on configuring TLS/SSL > encryption in z/OS: > > http://www.ibm.com/support/docview.wss?uid=swg27028558=1 > > Although it was written almost 6 1/2 years ago

Re: SSL on tso

2017-03-21 Thread Timothy Sipples
This presentation provides excellent advice on configuring TLS/SSL encryption in z/OS: http://www.ibm.com/support/docview.wss?uid=swg27028558=1 Although it was written almost 6 1/2 years ago (as I write this), it's still an excellent technical guide. Refer to the z/OS Knowledge Center for your

Re: SSL on tso

2017-03-20 Thread Elardus Engelbrecht
saurabh khandelwal wrote: >We have requirement to enable SSL for two access with ibm PCOOM emulator Are you referring to IBM PCOM emulater? Just checking about your spelling. >with port 992 for secure connection. It depends on what your TCP/IP staff is using that port or any other port for

SSL on tso

2017-03-20 Thread saurabh khandelwal
Hello group, We have requirement to enable SSL for two access with ibm PCOOM emulator with port 992 for secure connection. I tried looking at document and rebook but didn't find any implementation steps. Can anybody help to make this setup work. Regards Saurabh